ZDI-CAN-32361: ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93522.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Affected X.Org Server installations are exposed when an attacker can already execute code locally as a low-privileged user. This is a local privilege-escalation issue, not one described as remotely exploitable.
What level of access does an attacker need to exploit it?
The attacker must first obtain the ability to execute low-privileged code on the target system. Successful exploitation can then allow privilege escalation.
How severe is the issue?
The vulnerability has a CVSS rating of 7.8 and a listed risk score of 46.